Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
File:                     caJzmyDCWcXRs4jRRT9vF5nyj2w.mft (raw, json)
Hash identifier:          Io77YGBRGONZ9evYlsjFvpiX5a7I1l9g1e2CzLBbR2M=
Subject key identifier:   8A:9E:0E:1F:55:17:E3:51:3D:A9:7E:C4:EB:83:3C:91:F2:38:D0:C7
Authority key identifier: 71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C
Certificate issuer:       /CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c
Certificate serial:       01A119AB4B35577047E8C7ED1FEA51D39772
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
Manifest number:          07EB
Signing time:             Thu 08 Oct 2026 04:00:18 +0000
Manifest this update:     Thu 08 Oct 2026 04:00:18 +0000
Manifest next update:     Fri 09 Oct 2026 04:00:18 +0000
Files and hashes:         1: Yybkl0ZQXrY26MdD4FQ9nCbOh9c.roa (hash: xOQT8aF5alDLKyDZy7KGBBHerw/+VNesMI/Q2sx+T/E=)
                          2: caJzmyDCWcXRs4jRRT9vF5nyj2w.crl (hash: TqlFP/ufD2EW1lt7cZb3zXaGlN499gMA2ZJPGZAbfw4=)
                          3: f6Gl5ia878MGtM32MXnrZU8aNMI.roa (hash: DY0u0e2tgwdLOC3jP4WK/B8b0MSVRVEFdP0Swwb6Kq0=)
                          4: s9H6P_An9Cs8KJ23K6jcUiaST5I.roa (hash: R6YBzLVPih79ie1zLN00BwSvjURpM3Xic3Nu8UvJvIk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 22:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:19:ab:4b:35:57:70:47:e8:c7:ed:1f:ea:51:d3:97:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c
        Validity
            Not Before: Oct  8 04:00:18 2026 GMT
            Not After : Oct  9 04:00:18 2026 GMT
        Subject: CN=8a9e0e1f5517e3513da97ec4eb833c91f238d0c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0c:b0:dd:8a:52:c5:67:22:05:75:52:7f:f1:
                    67:f9:1e:f7:db:76:bd:4b:08:95:43:ac:e5:fe:81:
                    c3:c9:7c:f6:e7:68:5f:f3:64:3e:b1:e6:f5:60:13:
                    2d:6c:0f:36:d0:22:5c:59:51:a3:48:62:8b:8f:22:
                    e9:51:99:ba:ae:0e:e2:09:e5:53:5c:74:ce:09:86:
                    fd:06:a3:74:b9:06:92:92:4b:ec:24:b0:cf:22:9c:
                    0b:8b:e6:01:d6:56:72:62:79:69:f7:34:9f:e8:ac:
                    73:f7:bf:83:ce:59:a2:8e:5e:9c:85:0b:9a:b2:23:
                    72:d8:45:bc:48:c9:40:91:74:23:67:42:06:67:d8:
                    e5:45:c7:46:d7:20:11:4a:c6:bb:a9:46:c2:03:4f:
                    5a:7c:8c:4d:1e:e9:6c:75:3d:de:c4:eb:c7:7b:7d:
                    15:11:6a:3b:2f:36:4d:47:26:67:5b:16:27:12:0d:
                    c9:ee:86:4a:12:43:42:fe:c9:a8:4c:90:ba:09:28:
                    a7:65:39:15:50:66:66:03:47:9b:63:7e:1b:67:52:
                    b0:55:71:0b:09:54:ee:3f:52:68:37:f0:3a:95:bd:
                    64:cf:a1:5e:e6:9f:fb:e9:01:d4:24:d3:39:84:92:
                    de:d6:b1:ff:e9:89:12:8c:81:63:51:f8:4b:5f:17:
                    02:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:9E:0E:1F:55:17:E3:51:3D:A9:7E:C4:EB:83:3C:91:F2:38:D0:C7
            X509v3 Authority Key Identifier:
                keyid:71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:a2:08:5f:20:b4:84:42:f2:d6:ef:2e:09:8a:8c:d7:15:de:
         b0:c8:4a:76:f1:34:03:42:99:24:b0:03:39:e3:99:29:41:0d:
         16:58:01:2b:5c:36:0a:23:6b:ff:56:0a:4e:f8:d5:e8:bf:c6:
         8e:27:d2:93:a5:7f:f9:fe:e4:a6:bf:f6:de:07:46:36:51:ec:
         9f:4a:91:05:f2:2f:91:08:47:94:e0:63:3c:4c:20:a0:96:31:
         23:00:84:18:88:a2:15:92:78:81:e3:86:27:b3:34:e1:7f:a2:
         49:15:91:87:a5:af:06:7d:4f:c2:14:ad:34:a7:9d:8c:9c:3a:
         cd:84:2f:a0:e2:98:7c:dc:86:de:70:b8:9d:30:e3:a3:08:e8:
         aa:24:c9:2f:91:03:a9:43:24:5c:1d:86:8e:c0:2d:99:c1:f7:
         24:72:c1:04:2b:0e:f6:08:d0:bf:7f:cb:3f:25:17:d5:6d:11:
         76:51:2e:ef:d4:f3:0f:a4:f8:8a:25:0f:d1:98:d6:92:e6:c7:
         47:ae:8b:ee:bb:fd:49:85:35:ac:cf:de:1e:0f:da:a6:c1:2b:
         15:f1:a4:ef:2e:4f:69:a8:78:e2:b4:72:96:8f:9b:34:48:0d:
         dd:8d:28:e6:34:f5:08:c9:d7:37:21:a2:3a:c2:e1:b5:3e:10:
         54:9e:8f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:25:54 2026 by rpki-client